Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa
File:                     58999dee-a5dd-3f9e-9eae-4627b45d30df.roa (raw, json)
Hash identifier:          h53GOt/klEuvcNxEGPKoIEBhkjBf3HOrYRBTcy2wEy0=
Subject key identifier:   8D:8E:ED:83:0F:54:E4:24:9C:EB:BF:AF:97:27:48:3B:8E:59:DD:50
Certificate issuer:       /CN=59df81a1-cce3-4626-9cbb-51da282803bf
Certificate serial:       010D0C9F432858474585EF5B59593A9A97CCA600
Authority key identifier: D9:70:2F:5B:89:D9:C5:D3:86:61:81:94:5A:20:7B:35:45:3B:3D:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     399557
IP address blocks:        2001:504:109::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:ef:5b:59:59:3a:9a:97:cc:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59df81a1-cce3-4626-9cbb-51da282803bf
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=f8fc4263-5a0e-4e1e-9924-2671bf583564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:c6:16:88:e2:63:79:f6:fa:b6:26:ac:ed:
                    19:3e:60:99:70:05:90:5f:41:4e:b2:4c:bd:db:75:
                    ef:94:c7:90:26:51:5d:0b:19:f8:1f:9a:40:ef:45:
                    77:2e:21:8d:ac:b7:43:52:ff:13:7e:7e:5c:0e:b4:
                    88:f4:da:79:c7:04:7c:94:88:98:8a:10:3a:6d:15:
                    fa:cd:fa:54:37:e2:2f:2d:32:bf:0c:5b:13:03:36:
                    e2:87:2a:cc:15:8e:73:8c:cd:1d:5a:1d:c8:77:46:
                    65:cb:4a:e7:36:a6:52:f0:2b:55:63:5c:f2:7f:6d:
                    28:0b:60:51:ad:f6:66:0e:36:3c:b1:1a:1f:12:1e:
                    4d:ef:85:ec:b1:c9:9f:d0:a6:95:30:7b:57:e2:12:
                    e8:69:a7:61:52:83:2d:96:88:68:b8:80:c9:56:76:
                    40:f4:b8:a8:95:25:a9:c9:65:08:ca:64:1d:3d:10:
                    e7:6c:11:9c:62:81:6a:73:94:9f:82:33:31:24:07:
                    b8:6e:b7:03:0d:22:77:12:bc:b0:48:1d:c9:81:9c:
                    d5:66:b9:d8:10:f3:1a:cc:89:22:b5:e0:5e:d7:be:
                    f5:ff:6c:1c:35:b4:27:5b:d7:71:df:97:a7:ae:29:
                    ca:91:61:36:42:7c:bc:00:ba:45:23:76:66:1a:e4:
                    64:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8E:ED:83:0F:54:E4:24:9C:EB:BF:AF:97:27:48:3B:8E:59:DD:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/58999dee-a5dd-3f9e-9eae-4627b45d30df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf/59df81a1-cce3-4626-9cbb-51da282803bf.crl

            X509v3 Authority Key Identifier:
                keyid:D9:70:2F:5B:89:D9:C5:D3:86:61:81:94:5A:20:7B:35:45:3B:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59df81a1-cce3-4626-9cbb-51da282803bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:109::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:43:37:97:fd:2e:62:71:e1:cb:1f:16:42:8b:60:90:1f:ed:
         dd:6c:3f:d3:6b:cb:13:c4:1d:60:9b:7c:2a:03:a0:06:5f:68:
         07:70:c7:8f:66:19:fd:c8:0c:37:58:64:4f:1e:05:e8:68:76:
         56:4f:da:55:c0:4e:1c:e5:cb:c3:c9:a7:d0:2a:42:3c:f9:21:
         7f:6a:ee:a6:1e:b2:8a:8b:2c:b9:fb:22:ea:cd:2c:ce:66:a0:
         55:1b:08:e7:a7:ee:ba:e8:a1:ae:5b:22:dd:6b:a7:da:dd:d8:
         0a:15:d4:dd:d1:f4:35:26:dc:29:57:2a:e2:a6:b3:e6:ee:a2:
         4f:9f:8a:bf:c9:56:ab:21:93:58:0f:90:f8:f4:88:a5:7e:3c:
         44:e1:a2:5d:18:2a:ec:2c:03:95:a8:f0:18:56:43:b3:61:48:
         20:2f:c5:0a:aa:ff:cb:c2:03:56:f1:c4:29:a4:64:65:19:6e:
         95:76:c1:55:69:27:67:7f:fb:2f:88:2c:fd:2d:79:45:f1:c4:
         6b:9b:de:4f:0e:8a:ec:91:20:ce:5f:d9:17:9b:a9:a3:5f:86:
         16:ad:fa:4e:59:bd:f1:30:de:ed:0c:ab:4f:5d:80:ee:b3:97:
         06:f8:e8:1a:40:99:37:85:9f:4e:7b:3b:f9:56:78:dd:a9:7c:
         4a:84:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:30 2024 by rpki-client on console-ams.rpki-client.org